【已复现】Fastjson 1.2.66–1.2.83 JsonType 纯库一键 RCE(AutoType 关闭仍可利用;完整 RCE 需 JDK8 + Spring Boot LaunchedURLClassLoader)。仅限授权安全研究与本地防御验证。
☆88Jul 21, 2026Updated last month
Alternatives and similar repositories for 2026FastjsonPoC
Users that are interested in 2026FastjsonPoC are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Docker labs + defensive scanner for fastjson remote-class-load RCE. fastjson 1.2.66-1.2.83: @JSONType resource probe (CVE-2026-16723). fa…☆206Jul 27, 2026Updated last month
- 基于W01fh4cker大佬的LearnJavaMemshellFromZero从零掌握java内存马的复现重组版本。☆95Jun 15, 2026Updated 2 months ago
- Fastjson 1.2.68 ~ 1.2.83 RCE☆94Jul 27, 2026Updated last month
- Luvv-MCP 是一个 AI 原生的前端安全分析引擎,接入 Claude Code 后,你说一句"帮我审计这个网站",AI 就能自动完成技术栈识别(1.8 万条规则覆盖 CMS/框架/CDN/中间件)、泄露扫描(阿里云 AK、GitHub Token、Webhoo…☆38Aug 19, 2026Updated 2 weeks ago
- dnslog reverse vul-verify 反连平台 漏洞验证☆16Jul 6, 2020Updated 6 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- 一些Java RASP demo☆11Sep 26, 2019Updated 6 years ago
- Springboot的一个webshell☆45Jul 10, 2019Updated 7 years ago
- ☆36Dec 12, 2022Updated 3 years ago
- QQ小程序反编译逆向/微信小程序反编译逆向/红队攻击面分析/快速漏洞/检查/筛查☆80Jun 13, 2026Updated 2 months ago
- vshell-firewall is a flexible, high-performance TCP proxy service designed to block fingerprinting and reconnaissance attempts targeting …☆18Aug 26, 2026Updated last week
- Java反序列化漏洞学习☆14Jul 1, 2021Updated 5 years ago
- List of some AD tools I frequently use☆60Jun 30, 2026Updated 2 months ago
- PHP文件上传50+绕过手法全 景解析☆18Mar 16, 2025Updated last year
- 内存马查杀工具,尤其针对Agent型,原理是dump出JVM当前的class并进行字节码分析,并加入自动修复的功能☆188May 10, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ☆18Jun 7, 2023Updated 3 years ago
- geoserver CVE-2024-36401漏洞利用工具☆45Jul 24, 2024Updated 2 years ago
- 一些POC、EXP☆11Nov 4, 2019Updated 6 years ago
- 编码解码工具☆21Jan 7, 2025Updated last year
- jwtCracker是一款go语言编写的jwt常见安全问题利用工具☆24May 8, 2024Updated 2 years ago
- 入侵痕迹清理/Cleaning up traces of intrusion☆253Jul 15, 2026Updated last month
- VMware vCenter(Unauthenticated)☆18Nov 2, 2020Updated 5 years ago
- 二进制漏洞扫描☆25Sep 16, 2025Updated 11 months ago
- 内网安全从零开始红队教程,这可能是国内最系统最适合小白的内网安全教程。☆47Sep 25, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A customized spectator HUDs for CS2, Eclipse Hud Manager 6☆13Apr 17, 2025Updated last year
- Bypassing AV, EDR, Application Whitelisting and ASR Rules☆13Apr 18, 2023Updated 3 years ago
- 冰蝎3 流量 分析解密工具☆15Jan 8, 2022Updated 4 years ago
- ☆23Apr 16, 2026Updated 4 months ago
- 让fscan再次伟大☆369Aug 13, 2026Updated 3 weeks ago
- ☆295May 7, 2022Updated 4 years ago
- pwntools for go!☆12Jul 14, 2019Updated 7 years ago
- An Improved Proof of Concept for CVE-2022-1388 w/ an Interactive Shell☆14May 25, 2025Updated last year
- 创建服务持久化☆109Apr 26, 2021Updated 5 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- Windows Api调用,用来绕过杀软添加用户☆22May 15, 2021Updated 5 years ago
- java-web 自动化鉴权绕过☆379Apr 3, 2025Updated last year
- 用于若依和Jeecg数据库中密码的爆破☆22Jul 19, 2025Updated last year
- frp修改版,增加socks、pf命令,便捷启用socks5代理、端口转发,且去除流量特征,增加loadini命令,支持命令行参数导入base64编码的配置文件☆102Dec 5, 2021Updated 4 years ago
- ☆55Dec 29, 2021Updated 4 years ago
- 6万字奶爸级WebGoat8.X代码审计大全,全文均可复现,适合刚学完JAVASE准备开始代码审计的师傅🌟☆170Jun 15, 2026Updated 2 months ago
- Penetration test☆56Apr 17, 2021Updated 5 years ago